Move the gateway to junior.gib: CI deploy, compose copy, renewal script, docs

README.md

@@ -25,23 +25,24 @@ Apple Watch  --HTTPS-->  gateway  --WebSocket-->  T3 Code server (one per enviro
 
 ## Running the gateway
 
-The gateway is one container with one SQLite file in `/data`. [`deploy/compose.yml`](deploy/compose.yml)
-is the stack on server-gib, and [`gateway/Containerfile`](gateway/Containerfile) builds the image.
-CI builds and deploys every push to `main` that touches `gateway/`.
+The gateway is one container with one SQLite file in `/data`. It runs under rootless podman on
+junior.gib, the VPS. [`deploy/compose.yml`](deploy/compose.yml) is a copy of that stack, and
+[`gateway/Containerfile`](gateway/Containerfile) builds the image. CI builds and deploys every push
+to `main` that touches `gateway/`.
 
-Operators use the `wristcode` CLI inside the container:
+Operators use the `wristcode` CLI inside the container, on junior.gib:
 
 ```sh
 # Connect a T3 Code server. Make the one-time credential on that server first:
 t3 auth pairing create --scope orchestration:read --scope orchestration:operate --label "WristCode gateway"
-docker exec -it wristcode-gateway wristcode host add https://t3mac.gbrown.org <credential> --label "Mac mini"
+podman exec -it wristcode-gateway wristcode host add https://t3mac.gbrown.org <credential> --label "Mac mini"
 
 # Pair a watch: enter the printed code on the watch within 5 minutes.
-docker exec -it wristcode-gateway wristcode pair
+podman exec -it wristcode-gateway wristcode pair
 
-docker exec -it wristcode-gateway wristcode host list
-docker exec -it wristcode-gateway wristcode device list
-docker exec -it wristcode-gateway wristcode device revoke <id or name>
+podman exec -it wristcode-gateway wristcode host list
+podman exec -it wristcode-gateway wristcode device list
+podman exec -it wristcode-gateway wristcode device revoke <id or name>
 ```
 
 The gateway exchanges the credential for a 30 day T3 session limited to reading and driving